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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S. C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

Responsive to communication(s) filed on 03 September 2002 . 
2a)D This action is FINAL. 2b)S This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) S Claim(s) 1-70 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) ^ Claim(s) 1-70 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) ^ The drawing(s) filed on 07 January 2002 is/are: a)S accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. Q Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1 . Claims 1-70 have been examined. 

Claim Rejections - 35 USC § 102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

3. Claims 1-70 are rejected under 35 U.S.C. 102(e) as being clearly anticipated by Zhang et 
al. U.S. Pub. No. 20020174335 (hereinafter Zhang). 

4. As per claim 1, Zhang discloses a method for controlling access to network, comprising 
the steps of: establishing a trust relationship between a first supplicant and an authenticator both 
disposed on a wired network (Zhang: [0072]: AP and authenticator authenticate each other over 
wired network), wherein said first supplicant is authorized to access services on the network 
(Zhang: [0055]); and extending said trust relationship to a second supplicant in communication 
with said first supplicant via a communication link, wherein said second supplicant is allowed 
access to said network services of the network (Zhang: [0074]-[0082]: authentication process 
between MT and authentication server). 
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5. As per claim 2, Zhang discloses the method of claim 1 . Zhang further discloses wherein . 
said authenticator is a switch, said first supplicant is an access point, and said second supplicant 
is a wireless client (Zhang: [0055]). 

6. As per claim 3; Zhang discloses the method of claim 1 . Zhang further discloses wherein 
said first supplicant in the step of establishing authenticates to an authentication server disposed 
on the network such that said trust relationship is established between said authenticator and said 
first supplicant (Zhang: [0055] and [0072]). 

7. As per claim 4, Zhang discloses the method of claim 3. Zhang fiirther discloses wherein 
upon authentication of said first supplicant in the step of establishing, first supplicant information 
is stored in said authenticator that is a switch so that future communications with said switch 
from said first supplicant is authorized by said switch (Zhang: [0072]). 

8. As per claim 5, Zhang discloses the method of claim 1 . Zhang further discloses wherein 
said first supplicant authenticates to an authentication server disposed on the network such that 
said trust relationship is established between said authenticator and said first supplicant, said first 
supplicant and said authenticator authenticating mutually (Zhang: [0072]). 

9. As per claim 6, Zhang discloses the method of claim 1 . Zhang further discloses wherein 
once said trust relationship is established between said first supplicant and said authenticator, a 
message authentication check key is generated for signing subsequent communications between 
said first supplicant and said authenticator (Zhang: [0072]) 

10. As per claim 7, Zhang discloses the method of claim 6. Zhang further discloses wherein 
said message authentication key uniquely identifies said first supplicant to said authenticator 
(Zhang: [0072]). 
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11. As per claim 8, Zhang discloses the method of claim 1 . Zhang further discloses wherein 
once said trust relationship is established between said second supplicant and said authenticator, 
a session key is generated for subsequent communications between said second supplicant and 
said first supplicant (Zhang: [0082]: session key). 

12. As per claim 9, Zhang discloses the method of claim 8. Zhang further discloses wherein 
said session key uniquely encrypts said communications via said communication link between 
said first and second supplicant (Zhang: [0045]). 

13. As per claim 10, Zhang discloses the method of claim 1. Zhang further discloses wherein 
said communication link is an encrypted communication session between said first supplicant 
and said second supplicant created prior to said trusted relationship being extended to said 
second supplicant (Zhang: [0042]). 

14. As per claim 11, Zhang discloses the method of claim 1. Zhang further discloses wherein 
said trust relationship is extended to said second supplicant in the step of extending by 
authenticating said second supplicant to an authentication server of the network (Zhang: [0075]). 

15. As per claim 12, Zhang discloses the method of claim 1 . Zhang further discloses wherein 
said trust relationship is extended to said second supplicant in the step of extending by storing 
second supplicant information in said authenticator whereafter packet traffic communicated 
between said second supplicant and said authenticator is transmitted through said first supplicant 
unimpeded (Zhang: [0075] and [0082]). 

16. As per claim 13, Zhang discloses the method of claim 1 . Zhang further discloses wherein 
a handshake protocol is utilized between an authentication server of the network and said first 
supplicant (Zhang: [0072]). 
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17. As per claim 14, Zhang discloses the method of claim 1 . Zhang further discloses wherein 
a handshake protocol is utilized between an authentication server of the network and said second 
supplicant (Zhang: [0074]-[0082]: handshake). 

18. As per claim 15, Zhang discloses the method of claim 1 . Zhang further discloses wherein 
said second supplicant in the extending step is one of a laptop computer, handheld device, and 
electronic tablet each operable to communicate wirelessly to said first supplicant (Zhang: [0055]: 
mobile terminal and access point). 

19. As per claim 16, Zhang discloses the method of claim 1. Zhang further discloses wherein 
said trust relationship between said first supplicant and said authenticator is invalidated by said 
authenticator until said first supplicant is properly authenticated to an authentication server, and 
said trust relationship between said second supplicant and said authenticator is invalidated by 
said authenticator until said second supplicant is properly authenticated to said authentication 
server (Zhang: [0072] and [0075]-[0082]: authentication process). 

20. As per claim 17, Zhang discloses the method of claim 1. Zhang further discloses wherein 
said authenticator is a switch that controls access to a switch port of said switch to which said 
first supplicant is connected, whereupon after successful authentication of said first supplicant 
and said second supplicant, said switch authorizes access to the network via said switch port 
(Zhang: [0082]). 

21 . As per claim 1 8, Zhang discloses the method of claim 1 . Zhang further discloses wherein 
once said trust relationship is established in said first supplicant and said second supplicant, a 
MAC address of said first supplicant is stored in said authenticator and a MAC address of said 
second supplicant is stored in said authenticator (Zhang: [0082]). 
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22. As per claim 19, Zhang discloses the method of claim 1 . Zhang further discloses wherein 
said the network is an IEEE 802.1 lx architecture (Zhang: [0031]). 

23. As per claim 20-70, claims 20-70 encompass the same scope as claims 1-19. Therefore, 
claims 20-70 are rejected based on reasons set forth above in rejecting claims 1-19. 

Conclusion 

24. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

Anton, Jr. U.S. Pub. 20020157090 discloses automated updating of access points in a 
distributed network. 

Branigan et al. U.S. Pub. No. 20020090089 discloses method for secure wireless 
networking. 

Nesset et al. U.S. Pat. No. 6766453 discloses authenticated key agreement protocol where 
the communicating parties share a secret key with a third party. 

Nesset U.S. Pat. No. 7073066 discloses offloading cryptographic processing from an 
access point to an access point server using otway-rees key distribution. 

Young et al. U.S. Pat. No. 7024690 discloses protected mutual authentication over an 
unsecured wireless communication channel. 

Sashihara U.S. Pub. No. 20020157007 discloses user authentication system used between 
wireless network and wired network. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Shin-Hon Chen whose telephone number is (571) 272-3789. The 
examiner can normally be reached on Monday through Friday 8:30am to 5:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information. system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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Examiner 
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